Cloud-native security integrates security into cloud-native architectures — securing containers, Kubernetes, serverless functions, and CI/CD pipelines.
Key principles: immutable infrastructure (rebuild, don't patch), shift left (security in CI/CD), least privilege for service accounts, network policies for pod-to-pod communication in K8s.